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Abstract — We determine the capacity of the classical compound 
quantum wiretapper channel with channel state information 
at the transmitter. Moreover we derive a lower bound on the 
capacity of this channel without channel state information and 
determine the capacity of the classical quantum compound 
wiretap channel with channel state information at the transmitter. 



I. Introduction 

The compound channel models transmission over a channel 
that may take a number of states, its capacity was determined 
by 0. A compound channel with an eavesdropper is called a 
compound wiretap channel. It is defined as a family of pairs 
of channels {(Wt,Vt) : t = 1, ••■ , T} with common input 
alphabet and possibly different output alphabets, connecting a 
sender with two receivers, one legal and one wiretapper, where 
t is called a state of the channel pair (Wt,Vt). The legitimate 
receiver accesses the output of the first channel Wt in the pair 
(Wt, Vt), and the wiretapper observes the output of the second 
part Vt in the pair (Wt, Vt), respectively, when a state t governs 
the channel. A code for the channel conveys information to the 
legal receiver such that the wiretapper knows nothing about the 
transmitted information. This is a generalization of Wyner's 
wiretap channel lfT31 to the case of multiple channel states. 

We will be dealing with two communication scenarios. In 
the first one only the transmitter is informed about the index 
t (channel state information (CSI) at the transmitter), while 
in the second, the legitimate users have no information about 
that index at all (no CSI). 

The compound wiretap channels were recently introduced 
in 0. A upper bound on the capacity under the condition that 
the average error goes to zero and the sender has no knowledge 
about CSI is obtained. The result of J5] was improved in 1 5 1 
by using the stronger condition that the maximal error should 
go to zero. Furthermore, the secrecy capacity for the case with 
CSI was calculated. 

This paper is organized as follows. 

In Section [TT] we present some known results for classical 
compound wiretap channel which we will use for our result's 
proof. 

In Section [HI] we derive the capacity of the classical 
compound quantum wiretap channel with CSI and give a lower 



bound of the capacity without CSI. In this channel model the 
wiretapper uses classical quantum channels. 

In Section [TV] we derive the capacity of the classical 
quantum compound wiretap channel with CSI. In this model 
both the receiver and the wiretapper use classical quantum 
channels, and the set of the states can be both finite or infinite. 
Here we will use an idea which is similar to the one used in 

na. 

II. Classical Compound Wiretap Channels 

Let A,B, and C be finite sets, P(A), P(B), and P(C) 
be the sets of probability distributions on A, B and C, 
respectively. Let 6 := {1, ■ ■ ■ ,T}. For every t <E 9 let Wt be a 
channel A -> P(B) and V t be a channel A -> P(C). We call 
(Vt,Wt)t£9 a compound wiretap channel. W" and V t n stand 
for the n-th memoryless extensions of stochastic matrices Wt 
and Vt. 

Here the first family represents the communication link to 
the legitimate receiver while the output of the latter is under 
control of the wiretapper. 

Let X be a discrete random variable on a finite set 
{x\,--- ,x n }, with probability distribution function pi := 
Pr(xi) for i = 1, • • • ,n, then the Shannon entropy is defined 
as 



H(X) 



i=l 



Pi log Pi 



Let X be a discrete random variable on a finite set X with 
probability distribution function Px, let F be a discrete 
random variable on a finite set 2) with probability distribution 
function Py, and let Pxy be their joint probability distribu- 
tion, then the mutual information between X and Y is defined 
as 

D i m p xv(x,y) 
P X Y(x,y)\og 



I(X,Y) 



Px(x)P Y (y) 



Let N(x\x n ) be the number of occurrences of the symbol x in 
the sequence X n . For a probability distribution P E P(A) and 
S > let typical sequences and conditional typical sequence 
be defined as : 

V P l := {x n G A n :N(x\x n )= nP(x)\fx G A} , 
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T P \ 5 ■■= {x n e A" 

: \N(x\x n ) - nP(x)\ < 6y/nP(x)(l- P(x))Vx £ A} . 

An (n,J n ) code for the compound wiretap chan- 
nel (Vt,Wt)tee consists of stochastic encoders {E} : 
{1, • • • , J,i} — > P(A n ) and a collection of mutually disjoint 
sets {Dj C B n : j € {1, • • • , J n }} (decoding sets). 

A non-negative number R is an achievable secrecy rate for 
the compound wiretap channel (Wt, Vt) in the case with CSI 
if there is a collection of (n, J n ) codes ({E t : t 6 6}, {Dj : 
j = 1, • • • , J„}) such that 

lim inf — log J n > R , 

lim max max V E t (x n \j)W?'(D c Ax n ) = , (1) 
n->oo tee je{i,---,J n ] ' J 



lim max I(J;Z?) = , 



(2) 



where J is an uniformly distributed random variable with 
value in {1, • ■ • , J n }, and Zf are the resulting random vari- 
ables at the output of wiretap channels V t n . 

A non-negative number R is an achievable secrecy rate for 
the compound wiretap channel (Wt,Vj) in the case without 
CSI if there is a collection of (n,J n ) codes (E,{Dj : j = 
1, • • • , J n }) such that 

lim inf — log J n > R , 

lim max max V E(x n \j)W t n (D c Ax n ) = , (3) 
n-»oo tee je{i,--- ,j n } £ — ' 



x n eA n 
lim max I(J;Z?) = 



(4) 



Remark 1: A weaker and widely used security crite- 
rion is obtained if we replace (O, respectively @, with 

lim^oo maxtee ±I(J;Z?) = . 

P?(Tp n t)S ) ' Pt,S 
, else 

and := {-X J y}je{i,-,Jn} ) ie{i ) - ,in,t} be a famil y of 

random matrices whose entries are i.i.d. according to p' t . 

It was shown in [5 1 that for any lu > 0, if we set 

J = ^2 T H min * e8 W J>t,Vt -' - n login, t) — MJ 

where /x is a positive constant which does not depend on j, t, 
and can be arbitrarily small when u goes to 0, then there are 
such {Dj : j = !,■■■ , J n } that for all t € 



Pr \ E t E r-wT( B ii4?) > ^ 2 "" w/2 



(5) 



Since here only the error of the legitimate receiver is analyzed, 
so for the result above just the channels Vt, but not those of 
the wiretapper, are regarded. 



In view of ©, one has (see J3)) 
the largest achievable rate, called capacity, of the compound 
wiretap channel with CSI at the transmitter Cg csi, is given 
by 

C s ,csi = min max (/(V, B t ) - /(V, Z t )) , (6) 
tee v->A->(BZ) t 

where B t are the resulting random variables at the output of 
legal receiver channels. Z t are the resulting random variables 
at the output of wiretap channels. 

Analogously, in case without CSI, the idea is similar to the 

if x n G 7~ n 

case with CSI: Let p'{x n ) := { P "V*U> ~ 

else 



and X n := {Xjj} je { h ... ,j„},i G {i,- ,l„} be a family of 
random matrices whose components are i.i.d. according to p'. 
For any uj > 0, define 



J = ^2 n ( min *e» (i (Pt-Vf)- A 



-i logi,,)-/! 



where /z is a positive constant which does not depend on j, t, 
and can be arbitrarily small when u> goes to 0, then there are 
such {Dj : j = 1, • • • , J n } that for all t € 

\j=l ™ i=l " / 



(7) 



Using (0 one can obtain (see [5|) that the secrecy capacity of 
the compound wiretap channel without CSI at the transmitter 
Cs is lower bounded as follows, 

C s > max (mhxI(V,B t ) -max I(V,Z t )) . (8) 
b ~ v^A^(BZ) t K tee K ' ; tee K 1 " 

III. Classical Compound Quantum Wiretap 
Channels 

Let A and £? be finite sets, and let H be a finite-dimensional 
complex Hilbert space. Let P(A) and P(B) be the sets of 
probability distributions on A and B respectively, and S(H) be 
the space of self-adjoint, positive-semidefinite bounded linear 
operators with trace 1 on H. Let 8 := {1, • • • ,T} and for 
every £ 6 6 let W t be a channel A — > P(B) and V t be a 
classical quantum channel, i.e., a map A — >• S(H): A9i-> 
Vt(x) G i?. We define (Vt,Wt)tgg as a classical compound 
quantum wiretap channel. Associate to Vt is the channel map 
on n-block V® n : A" -> S(H® n ) with V t ® n {x n ) := 7 t (a:i) ® 
V t (x„). 

For a state p, the von Neumann entropy is defined as 

S{p) := -tr(plogp) . 

Let P be a probability distribution over a finite set J, and 
$ := {p{x) : x £ J} be a set of states labeled by elements of 
J. Then the Holevo \ quantity is defined as 

X (P, $) := 5 ( PWPW J - E P ^ S (P( x » ■ 



\xe.J 



xeJ 
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An (n, J„) code for the classical compound quantum wire- 
tap channel (Vt, Wt)te8 consists of stochastic encoders {E} : 
{1, • • ■ , J n } —> P(A n ) and a collection of mutually disjoint 
sets {Dj C B n : j G {1, • • • , J„}} (decoding sets). 

A non-negative number R is an achievable secrecy rate for 
the classical compound quantum wiretap channel (Wt, Vt)te6 
with CSI if there is an (n, J„ ) code ({E t :te9}, {Dj : j = 

lj ' ' ' * Jn}) sucn mat 

lim inf — log J„ > R , 

n— >oo xi 



lim max max 

n->oo teO je{l,-- ,J„} 



E 



lim maxx(J;^f") 



, 



where J is an uniformly distributed random variable with 
value in {1, • • • ,J n }. Z t are the sets of states such that the 
wiretapper will get. 

A non-negative number R is an achievable secrecy rate for 
the classical compound quantum wiretap channel (Wt, Vt)te8 
without CSI if there is an (n J n ) code (E, {Dj : j = 
1, • • • , J n }) such that 

lim inf — log J n > R , 

n—toc 71 



lim max max 

n->oo tee je{i,- ,J„} 



E(x n \j)wr(mx n ) = o , 



lim maxx(J;Z? n ) = . 

n— >-oo tee 

Theorem 1: The largest achievable rate (secrecy capac- 
ity) of the classical compound quantum wiretap channel 
(Wt,Vt)tee in the case with CSI Cs,csi at the transmitter 
is given by 

Cs.csi = min max (I(P, B t ) - X (P, Z t )) . (9) 
tee p^A^B t z t 

Respectively, in the case without CSI, the secrecy capacity of 
the classical compound quantum wiretap channel (Wt, Vt)tee 
Cs is lower bounded as follows 



C s > 



max (min I(P, Bt ) 

>A^B t z t y tee ( ' tJ 



m&x X (P,Z t )), (10) 



where B t are the resulting random variables at the output of 
legal receiver channels, and Z t are the resulting random states 
at the output of wiretap channels. 
Proof: 1 ) Lower bound 
Let p' t , and Dj be defined like in classical case. Then 
(0 still holds since the sender transmits through a classical 
channel to the legitimate receiver. We abbreviate X := {X^ : 

t e 0}. 

^Analogously, in the case without CSI, let p' X n and Dj 
be defined like in classical case, then © still holds/ 



For p E S(H) and a > there exists an orthogonal 
subspace projector H p . a commuting with p® n and satisfying 

d 
a 2 



tr (p®«n p , a ) > 1 



tr (II PiQ ) < T s ^ +Kda ^ , (12) 

n P , Q • p®" • n p , Q < 2 - nS ^ +Kda ^ii Pia , (13) 

where a := #{A}, and K is a constant which is in polynomial 
order of n. 

For P £ P(A), a > and x n € TS there exists an orthog- 
onal subspace projector Hv,a(x n ) commuting with V® n a and 
satisfying: 

ad 



tv (V® n (x n )Il V7a (x n )) > 1- 
tr (H V}Ce (x n )) < 2 nS ( v \ p )+ Kada v^ , 

n Vta (x n )-v® n (x n )-n v , a (x n ) 

< 2 -nS(V|P)+Ji:odaVn IIVia ( a .n) _ 



tr(y®"(x")-n PV ^) >1 



v2 ' 



(14) 



(15) 



(16) 



(17) 



where a := #{A}, d := dimiJ, and K is a constant which 
is in polynomial order of n (see lfl3l ). 

Let 

Q t (x n ) : = n PVi!( ,^, a (/).y^(x' l ).n Vlia (/)n P14i ^ 



where a will be defined later. 

Lemma 1 (see HI]/): Let p be a state and X be a positive 
operator with X < id (the identity matrix) and 1 — tr(pX) < 
A < 1. Then 

\\p-VXpVX\\<V8X. (18) 

With the Lemma [Q CO), ([T7]>, and the fact that H-pv uay /a 
and Uy u a(x n ) are both projection matrices, for any t and x n 
it holds: 



||Q t (a:»)-Vi® n (a: n )|| < ^ 8 ( ad + d ^ . <i 9) 



a 



(11) 



We set 9 t := £ x „ p7 -„ P'7(x n )Qt(x n ). For given z™ and 

pt, 5 

t, (z n \Qt\z n ) is the expected value of (z n \Qt(x n )\z n ) under 
the condition x n 6 T™ t g- 

Lemma 2 (see ftTj): Let V be a finite dimensional Hilbert 
space, X\, ■ ■ ■ ,Xl be a sequence of i.i.d. random variables 
with values in S(V) such that Xi < p ■ idy for all i G 
{1, • • • , L}, and e s]0, 1[. Let p be a probability distribution 
on {X\,--- ,Xl}, p = ^l2iP(Xi)Xi be the expected value 
of Xi, and II' A be the projector onto the subspace spanned 
by the eigenvectors of p whose corresponding eigenvalues are 
greater than ,. A ,, , then 

Pr [WL- 1 ^ -%, x - P- n p , A || >cj 



(20) 



< 2 • (dimV)exp —L 



21n2(dimV)/i 
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Let V be the image of ITp By ( fT2] i. we have 
dimV < 2 nS(p)+Kda ^° E . 

Furthermore 

Qt(x n ) 

= n PVt ^ Vt , a {x n ) ■ v t ® n (x n ) ■ u Vt , a (x n )n PVt>a ^ 
<2- n ^ v ^ +Kada ^n PVt ^u Vt ^u PVua ^ 



< -n-S(V t \P)+Kada^H tt 

< 2 -n-S(V t \P)+Kad a ^ _ ^ j _ 



(21) 



The first inequality follows from ([Tol l. The second inequality 
holds because Hv t , a an d n PV - f are projection matrices. 
The third inequality holds because n PVt a ^ is a projection 
matrix onto V. 

Thus, by (|20) and (ED 

Pr (llE Z^ 0t(x S } " n e t ,Ae t n' etiA || > iej 



• exp 



"' l 81n2 

2 t2n{S{P)+KdoLyJan) 



. 2n(S , (V r t |P)-S(P))+KdaV" : (Va- 1 ) 



■ exp 



Un2 



^ . 2 n(-x(-P,^t))+-K'<ic«Vn(Vo-l) ) 



the equality in the last line holds since 

S(P)-S(V t \P) 



x(p, z t ) 



Notice that ||6 t - n^, t A 9 t n^ t A || < A. Let A := \t and 
large enough then 



V i=i L ™< 4 



e t || >e 



• exp 



■ 2 



n(-x(P,Z t ))+i<rdaV™(v / a-l) 



'16 In 2 

<exp(-i„, t .2-"W^) + C)) , 



(22) 



where £ is some suitable positive constant, which does not 
depend on j, t, and can be arbitrarily small when e goes to 0. 



Let L n ,t = 2 nt - x ( p ' Zt ^ +2 ^ and n be large enough, then by 
for all j it holds 



Pr ( HE r-^*( x i?) - e *H > e I ^ «p(-2" c ) (23) 



2 = 1 



and 



Pr MiE^*(4?)- e *ii >eV *j 



> 1 -Texp(-2" c ) 

> 1 - 2 _TW , 



(24) 



where w is some positive suitable constant which does not 
depend on j and t. 

^Analogously, in the case without CSI, let L n = 
2nmax t (x(P,Zt)+S) an( j n large enough, then we can find 
some positive constant v so that 

Pr J^Qt( X fh ~ e *H > e ViJ > 1 - 2~™ (25) 

for all j. 

Remark 2: Since exp(— 2"^) converges to zero double ex- 
ponentially faster, the inequality (2M remains true even if T 
depends on n and is exponentially large over n, i.e., we can 
still achieve exponentially small error. 

From (0 and d24"i i. it follows: For any e > 0, if n is large 
enough then the event 

t y j=i ™ ;=i 

nfn|llE^*( x i?)- *H eV * 

has a positive probability. This means that we can find a 
realization of xj*' with a positive probability such that 
for all t G 0, we have 

ErEi^ w "^5)<^ 

3=1 1 = 1 



and 



|£ — Q t (45)-6 t ||<eVi 



For any 7 > let 

i?:=min max (J(P, £ t ) - X (P, Z t )) + 7 
tee p^A-+B t z t 
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then we have 



have 



lim inf — log J n > R 

n— >oo fi 



(26) 



lim max max 

n-»oo tee 36{i,— ,./»} 



E ^ t (a: n |i)WTp||x") = 



(27) 



where _E f is the random output of {X\ 

Choose a sufficiently large but fixed a in ( TT9i l so that for 
all j it holds \\Vf n {xyJ) - Qt(xfJ)\\ < e . In this case, for 
any given / 6 {1, • • • , J n } we have 



i=i 



L n , t 



1=1 

L n , t 



l^_Q t ( a W)-e t 



!=1 



<Er-ii^"(4v)-^(4v) 



i=l 

r(t) 



Er-o*(^!i)- e *l 



< 2e 



(28) 



and ||Ej £^ ^K 8 ™^*]) - ©til < e for an Y probability 
distribution uniformly distributed on {1, • • • , J„}. 

Lemma 3 (Fannes inequality [14]): Let X and 2} be two 
states in a e?-dimensional complex Hilbert space and ||X — 
2)|| < (i < i then 



|5(X) - 5(2))| </ilogd-/ilog/x . (29) 



If J is a probability distribution uniformly distributed on 
{!,••■ , J rl }, then from the inequality (|28| | and Lemma [3] we 



x(J;Zf 



Ln,. 



^ i 5 E z^ y ®>S)l - 5 ( Q *) i 
+ \s(Q t ) - e j(j)s (e r-^ n o$)] 

i=i V=i / 



< e log d — e log e 

+ iE j w 



i=i 



< 3e log d — e log e — 2e log 2e . 
We have 

lim maxx(J;Z? n ) = 0. 



(30) 



(31) 



^Analogously, in the case without CSI, we can find a 

realization x™ ; of X^J with a positive probability such that: 
For all t E 9, we have 



HE^-Q t (^)-e t ||<eVi. 
(=1 ^" 

For any 7 > let 



i? := max I min/(P, B t ) — maxx(P, Z t ) ) + 7 , 

P^A=rB t Z t \ t£9 t 



then we have 



lim inf — log J n > R , 

n— >oo Tl 



(32) 



lim max max V E(x n \j)Wr(D c Ax n ) = 
i-s-oo tee j'e{i, •■•,/„} z — ' 



From ||X;f=! ^^®"(^',/) - ©til -> for n -> it follows 



(33) 



lim maxx(J;^f") = , 



(34) 



for any probability distribution J uniformly distributed on 
{1, • • • , J n } in the case without CSI.^j 

Combining and (f3TT > (respectively (l34l ) we obtain 

Os.csi > min max (J(V, B t ) - x(V, Z t )) , 
tee v-^A-^BtZt 
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respectively 

Cq > max (miniYP, B f ) — max y(P, Z f )) . 
5 - p^ A ^B t Zt tee y ' ' tee AV ' ;; 

2) Upper bound for case with CSI 

Considering (C n ) is a sequence of (n, J n ) code such that 

SU P^E E E(x n \j)W t n (D]\x n ) =: £l , n , (35) 

supx(J;Zf n )=:e 2 , n , (36) 
tee 

where lim„_ s . 00 ei >n = and lim„_ i . 00 62, n — 0, J denotes the 
random variable which is uniformly distributed on the message 

set {1, . . . , J n }. 

Let C(Vt,Wt) denote the secretey capacity of the wiretap 
channel (Vt, Wt) in the sense of [13|. Choose t' G 6 such that 
C(V t ,,Wt>) = mm te eC(Vt,Wt). 

It is well-known, in information theory, that even in the 
case without wiretapper (we have only one classical channel 
Wt'), the capacity cannot exceed I(J; B t >)+t; for any constant 
£ > 0. So the capacity of a quantum wiretap channel (Vt> , Wt') 
cannot be greater than 

< lim [I (J; Btf) - X (J; Zf n )] + £ + e 2 ,„ 

11— ±00 

< [I(J;B t ,)- X (J;Z t ,)} + e 
for any e > 0. 

Since we cannot exceed the secrecy capacity of the worst 
wiretap channel, we have 

Cs.csi < min max (J(V, B t ) - X (V, Z t )) . (37) 
tee v— s-A— >BtZt 



IV. Classical Quantum Compound Wiretap 
Channel with CSI 

Let H be a finite-dimensional complex Hilbert space. 
Let S(H) be the space of self-adjoint, positive-semidefinite 
bounded linear operators on H with trace 1. For every t E 9 
let Wt respectively Vt be quantum channels, i.e., completely 
positive trace preserving maps S(H) —> S(H). 

An (n, J„,A) code for the classical quantum compound 
wiretap channel (Wt,Vt)tee consists of a family of vectors 
to := {w(j) : j = 1, • • • , J n } C S(H® n ) and a collection 
of positive semi-definite operators {Dj : j G {1, • • • , J n }} C 
S(H® n ) which is a partition of the identity, i.e. 2~2j=i Dj = 
id H ® n . 

A non-negative number R is an achievable secrecy rate for 
the classical quantum compound wiretap channel (Wt, Vt)tee 
with CSI if there is an (n, J„, A) code ({tot := {wt{j) : j} : 
t},{Dj : j}) such that 

lim inf — log J n > R , 



lim max - ^ tr «" (w t (j)) Dj) > 1 - A , 
n— >oo tee j n — ' 

J=l 

lim max x(J;^f ") = , 

n— >oo tee 

where J is a uniformly distributed random variable with value 
in {1, ,J n }, and Zt are the sets of states such that the 
wiretapper will get. 

Theorem 2: The largest achievable rate (secrecy capacity) 
of the classical quantum compound wiretap channel in the case 
with CSI is given by 

Ccsi= lim mmmBx-(x(P,Bf n )-x(P,Z? n )), (38) 
n->oo tee P,w t n 

where B t are the resulting random states at the output of legal 
receiver channels, and Z t are the resulting random states at the 
output of wiretap channels. 

Proof: Our idea is to send the information in two parts, 
firstly, we send the state information with finite blocks of finite 
bits with a code Ci to the receiver, and then, depending on t, 
we send the message with a code m the second part. 

1 ) Sending channel state information with finite bits 

For the first part, we don't require that the first part should 
be secure against the wiretapper, since we assume that the 
wiretapper already has the full knowledge of the CSI. 

By ignoring the security against the wiretapper, we have 
only to look at the compound channel (Wt)tee- Let W — 
(Wt)t be an arbitrary compound classical quantum channel. 
Then by 0, for each A G (0, 1) the A-capacity C(W, A) equals 

C(W, A) = inf maxx(p, W t ) ■ (39) 
t P 

If min t maxp Wt) > holds, then the sender can build 
a code C\ such that the CSI can be sent to the legal receiver 
with a block with length I < —. los T . ... , . We need to 

— min t maxp x(p,W t ) 

do nothing because in this case the right hand side of ( 138b is 
zero. 

Let c = 1 — A, then for any required upper bound 6 = 2~ c , 
with given d > 0, the sender can repeat sending this block 
log c • d times, and the legal receiver simply picks out the 
state that he receives most frequently to find out t with a error 
probability < S, 

The first part is of length I ■ log c • d = 0(1), which is 
negligible compared to the second part. 

2) Message transformation when both the sender and the legal 
receiver Know CSI 

If both the sender and the legal receiver have the full 
knowledge of t, then we only have to look at the single wiretap 
channel (W t ,V t ). 

In Q and (U, it is shown that there exists an (n,J n ,\) 
code for the quantum wiretap channel (W, V) with 

log J n = max( X (P, B® n ) - X (P, Z® n )) - e , (40) 

for any e > 0, where B is the resulting random variable at 
the output of legal receiver's channel and Z the output of the 
wiretap channel. 
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When the sender and the legal receiver both know t, they 



can build an (n, J n ,t, A) code c!jp where 

log J n , t = max( X (y, Bf n ) - X (V, Zf n )) e 

P,w t 



Thus, 



Ccsi > lim minmax — (x(P, B? 
n->oo tee p,w t n 



(41) 



X (P,Z? n )) ■ (42) 



Thus if for every t £ 9 and n £ N, 

I{P,Bf n ) > I(P,Zf n ) 

holds for all P £ P(A) and {w t (j) : j = 1, • • • , J„} C 
S'(iJ® rl ), we have 



C CS / = minmax( X (P, S t ) - X (P, ^)) ■ 



Remark 3: For the construction of the second part of our 
code, we use random coding and request that the randomiza- 
tion can be sent (see [7])- However, it is shown in [5| that the 
randomization could not always be sent if we require that we 
use one unique code which is secure against the wiretapper 
and suitable for every channel state, i.e., it does not depend on 
t. This is not a counterexample to our results above, neither to 
the construction of C\ nor to the construction of , because 
of following facts. 

The first part of our code does not need to be secure. For 
our second part, the legal transmitters can use the following 
strategy: At first they bulid a code C\ — (E. {Dj : j = 
1, • • • , J„}) and a code cf - (E®,{Df> : j = !,■■■ , J n }) 
for every t £ 9. If the sender wants to send the CSI 
tf £ 6 and the message j, he encodes t' with E and j 
with £?(* then he sends both parts together through the 
channel. After receiving both parts, the legal receiver decodes 
the first part with {Dj : j}, and chooses the right decoders 

{Df' ] : j} € U-Dj* 5 :j}:tee\ to decode the second part. 
With this strategy, we can avoid using one unique code which 
is suitable for every channel state. 
3) Upper bound 

For any e > choose t' e such that C(V t >,W t >) < 
M tee C{V u W t )+e. 

From and JD, we know that the capacity of the quantum 
wiretap channel (Wf , Vf) cannot be greater than 

lim m a x-( X (P,B^)- X (P,Z^ n )) . 

n— >oo P,w t , n 

Since we cannot exceed the capacity of the worst wiretap 
channel, we have 

Ccsi < lim minmax -( X (P, Bf n ) - X (P, Zf ")). (43) 
n-s-oo tee p,w t n 

This together with d42l completes the proof of Theorem [2] ■ 

Remark 4: In lH2l . it is shown that if for a given t and any 

n e N 

I(P,Bf n ) > I(P,Zf n ) 

holds for all P e P(A) and {w t (j) : j = 1, • • • , J„} C 
S(H® n ), then 

lim max - ( X (P, Bf n ) - X (P, Zf n )) 

n— >oo P,w t Tl 

= max(x(P,Bt)-x(P,Zt)) ■ 

P,w t 



So far, we assumed that the number of the channels, is 
< oo. Now we look at the case where \6\ can be arbitrary. 

Theorem 3: For an arbitrary set 9 we have 



Ccsi = Hm inf max -{ X (P, Bf n ) - X (P, Zf n )) ■ (44) 
n->oo tee p,w t n 



Proof: Let W : S(H) — > S(H) be a linear map, then let 



\W\\ 



sup max 

„ 6 NaeS(C"®fr),||a||i = l 



\{id n ®W){a)\\ 



(45) 



where | • || x stands for the trace norm. 

It is well known ifTTl that this norm is multiplicative, i.e. 

||W®W"||o = Wh- 1| W||o. 

A r-net in the space of the completely positive trace 
preserving maps is a finite set \ W ') u—\ w i m me property 
that for each W there is at least one k G {1, ■ • ■ , K} with 
||W- W^llo < r. 

Lemma 4 (r—net MOV ): For any r £ (0,1] there is a r- 



net of quantum-channels 



in the space of the 



completely positive trace preserving maps with K < (-) 
where d = dim H . 



3 \2d 4 



If \6\ is arbitrary, then for any £ > let r 



-logf 

1 v Ojl 



By 



Lemma H there exists a finite set 6' with \6'\ < (f) 2rf and 
r-nets (Wt') t , e9 ,, (Vt') t , e g, such that for every t £ 8 we can 
find at' £ 9' with \\W t - WflL < r and II - V t >\L < r. 



(*') 



For every t' e 6 1 ' the legal transmitters build a code C\ 
{wt',{D t 'j : j}}. Since by [7], the error of the code C 2 
decreases exponentially to its length, we can find an N 
0{- log£) such that for all t' £ 6' it holds 



(*') 



j^E tr ( w ® N M)) D t ',j) > i - a - e 



(46) 



(47) 



Then, if the sender obtains the state information "f" , he can 
send with finite bits "if" to the legal receiver in the first part, 
and then they build a code Cj that fulfills (|46]l and (07) to 
transmit the message. 
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For every t 1 and j let ip t > (j) & H® n ® H® n be an arbitrary 
purification of the state Wf(j)- Then we have 

tr[{W® N -W® N ) (wAj))] 

= tr (tr H . w [id% N ® - Wf w ) (|#(i))(#(i)l)]) 

= tr ® (Wf" - Wf N ) 

= \\id® N ® (Wf w - W®") (|^(7'))<# (jJDlli 

^ll^-^Ho-iKi^WX^OODIIi 

< iVr . 



The first equality follows from the definition of purifica- 
tion, the second equality follows from the definition of 
trace. The third equality follows from the fact that = 
tr(A) for any self-adjoint, positive-semidefinite bounded linear 
operator A. The first inequality follows by the definition 
of || • || 0. The second inequality follows from the facts 



that ||(|^(j)>(^'C?)l) 



N 



1 and ||W t c 





<8>N I 
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Mo is 



multiplicative. 
It follows 



-. Jjv 



Jjv 



3=1 



< -=- JwiV • T 
Jjv 

= iVr . 



(48) 



iVr tends to zero when £ goes to zero, since TV = 
0(-log£). 

Let J be a probability distribution uniformly distributed on 
{1, • • • , Jjv}, and {p(j) : j = 1, ■ ■ ■ , J n } be a set of states 
labeled by elements of J. By Lemma [3] we have 

\\x(J,v t ) - x (J,v t ,)\\ 

(Jn \ / Jjv 

E j O')^(pO'))J I E j 0')MpI?)) 

+ || J2 J(J)S (V t (p(j))) J2 J(J)S (VAp(j))) II 

< 2rlogd- 2rlogr , (49) 



since by ||V* - 
all p G 5(7/). 



< r, it holds ||Vl(p) - V t >{p)\\ < t for 



By gSJ and (@9) it holds 

m f x E tr 0")) D t>!j )>l-X-C-Nr 



X(J;Z? N ) <e + 2rlogd-2rlogr . 



Since iVr and 2t log d both tend to zero when £ goes to zero, 
we have 

J„ 

lim max — V tr (W? n (w v (j)) D t , .•) > 1 - A , 
«->oo tee J n * — ' 

lim x (J;^f") = o. 

n— foo 

The bits that the sender uses to transform the CSI is large 
but constant, so it is still negligible compared to the second 
part. We obtain 

C CS i> lim infma X i(x(P, J Bf")-x(P,^f n )) • (50) 

The proof of the converse is similar to those given in the 
proof of Theorem |2] where we consider a worst if. ■ 

Remark 5: For Theorem |2] and Theorem [3] we have only 
required that the probability that the legal receiver does not 
obtain the correct message tends to zero when the code length 
goes to infinity. We have not specified how fast it should tends 
to zero. If we analyze the relation between the error probability 
e and the code length, then we have the following facts. 

In the case of finite 9, let e\ denote the probability that 
the legal receiver does not obtain the correct CSI, and let £2 
denote the probability that the legal receiver, having CSI, does 
not obtain the correct message. Since the length of first part 
of the code is I ■ log c • d — O(logei), as we defined in 
Section HVl we have e^ 1 is (3(exp(7 • log c • c')) = 0(exp(n)), 
where n stands for the length of first part. And for the second 
part of the code, £2 decreased exponentially to the length of 
the second part, as proven in Q. Thus, the error probability 
£ = max{ei,£2} decreases exponentially to the code length 
in the case of finite 9. 

If 9 is infinite, let £\ denote the probability that the legal 
receiver does not obtain the correct CSI. Then we have to 

channels. 



- log ei \-2d 4 



build two r-nets, each contains 0(( 
If we want to send the CSI of these r-nets, I, as defined in 
Section ITVl will be 0(— 2d 4 ■ log(ei logei)), this means here 
e^ 1 will be 0(exp(j^)) = 0(exp(n)), where n stands for 
the length of first part. So we can still achieve that the error 
probability decreases exponentially to the code length in case 
of infinite 9. 
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